Search the Community

Plesk - Critical Security Vulnerability - Patch REQUIRED Dear Parallels Plesk Panel User: Please read this message in its entirety and take the recommended actions. Parallels has been informed of a SQL injection security vulnerability in some older versions of Plesk. This vulnerability is considered critical in nature and customers are advised take action quickly. A patch has been released to resolve this vulnerability. Based on the version and operating system of Plesk you use, please follow the instructions below. Linux Plesk 10 - Update to Plesk 10.3.1 MicroUpdate #6 or later. Update Instructions: here If possible, it is recommended to update all the way to Plesk 10.4.4 to provide the most stable user experience. Plesk 9 - Update to Plesk 9.5.4 MicroUpdate #11 or later Update Instructions: here Plesk 8 - Update to Plesk 8.6.0 MicroUpdate #2 or later Update Instructions: here Windows Plesk 10 - Update to Plesk 10.3.1 MicroUpdate #6 or later. Update Instructions: here If possible, it is recommended to update all the way to Plesk 10.4.4 to provide the most stable user experience. Plesk 9 - Apply Fix from Parallels Knowledge Base Update Instructions: here Plesk 8 - Apply Fix from Parallels Knowledge Base Update Instructions: here If you are already at or above the Version and MicroUpdate levels indicated above - you are already protected from this vulnerability. Parallels takes the security of our customers very seriously and urges you to act quickly by applying these patches.